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Abstract 

Motivated by applications in many economic environments, Bochet et al. [5] generalize the 

classic rationing model (see Sprumont [8 )as follows: there is a moneyless market, in which 

a non-storable, homogeneous commodity is reallocated between agents with single-peaked 

preferences. Agents are either suppliers or demanders. Transfers between a supplier and a 

O demander are feasible only if they are linked, and the links form an arbitrary bipartite graph. 

Information about individual preferences is private, and so is information about feasible links: 

^^ an agent may unilaterally close one of her links if it is in her interest to do so. For this 

vQ problem they propose the egalitarian transfer solution, which equalizes the net transfers of 

^O rationed agents as much as permitted by the bilateral constraints. Furthermore, they show 
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that the egalitarian mechanism elicits a truthful report of both preferences and links. In the 
variant where demanders are not strategic but demands need to be exactly met [T], they 



f^ propose a similar mechanism for which truthfully reporting the peaks is a dominant strategy, 

] but truthful reporting of links is not. 

• • The key contribution of the paper is a comprehensive study of the egalitarian mechanism 

. ^H with respect to manipulation by a coalition of agents. Our main result is that the egalitarian 

<^\{ mechanism is, in fact, peak group strategyproof : no coalition of agents can (weakly) benefit 

C^ from jointly misreporting their peaks. Furthermore, we show that the egalitarian mechanism 

cannot be manipulated by any coalition of suppliers (or any coalition of demanders) in the 

model where both the suppliers and demanders are agents. Our proofs shed light on the 

structure of the two models and simpify some of the earlier proofs of strategyproofness. An 

implication of our results is that the well known algorithm of Megiddo [7] to compute a 

lexicographically optimal flow in a network is group strategyproof with respect to the source 

capacities and sink capacities. 
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1 Introduction 

Motivated by applications in diverse settings, Bochet et al. [21 [l] study a model in which a homo- 
geneous commodity is reallocated between a given set of agents with single-peaked preferences. 
In this environment, each agent is endowed with a certain quantity of the commodity and has an 
ideal consumption level (his peak) of that commodity. An agent who is endowed with more than 
his ideal consumption level can thus be thought of as a supplier, and an agent who is endowed with 
less than his ideal consumption level can be thought of as a demander. Furthermore, transfers are 
possible only between certain pairs of agents, represented by a graph. The goal is to reallocate 
the commodity to balance supply and demand to the extent possible. The key difference from 
conventional economic models on this topic is the inability to use money: motivating applications 
include assigning (or reassigning) patients to hospitals, assigning students to schools, and allo- 
cating emergency aid supplies. On the other hand, it is easy to see that the resulting problem is 
essentially a transportation problem in a (bipartite) network. The distinguishing feature here is 
that the preferences of the agents (such as their peaks) and the other agents they are linked to is 
typically private information, so the agents must be given an incentive to report this information 
truthfully. 

Bochet et al. |2] propose a clearinghouse mechanism (a centralized organization of the market) 
that prescribes an allocation that is efficient with respect to (reported) preferences and (reported) 
feasible links between agents. They identify a unique egalitarian allocation — so named because of 
the intimate connection with the egalitarian solution of an associated supermodular game — that 
Lorenz dominates all Pareto efficient allocations for this problem. Furthermore, they show that 
the egalitarian mechanism is strategyproof with respect to both links and peaks: no individual 
agent can strictly benefit by misreporting his peak or the set of agents he is linked to. In a 
companion paper, Bochet et al. [Ij consider a "one-sided" model where the demanders are not 
strategic, and their demands have to be met exactly. For this model, they propose an egalitarian 
mechanism that is strategyproof with respect to peaks, but not with respect to links. 

Our main result is that the egalitarian mechanism is group strategyproof with respect to 
peaks in both the one-sided and two-sided models of Bochet et al. Furthermore, we show that 
under the egalitarian mechanism it is a weakly dominant strategy for any coalition of suppliers 
(or any coalition of demanders) to truthfully report their links. These results thus properly 
generalize the corresponding (individual) strategyproofness results of Bochet et al. Our proofs 
result in an improved understanding of the two models and simpify some of the earlier proofs of 
strategyproofness. 

The models of Bochet et al. O [T] generalize many well-known and well-understood models 
in the literature; we briefly discuss those that are very closely related to our work. If there is 
a single demander (or a single supplier), the problem reduces to a classical rationing problem of 
the sort considered by Sprumont [8]. The egalitarian rule then reduces to the "uniform" rule, 
and admits many characterizations. If the peaks are all identically 1, the problem reduces to a 



matching problem with dichotomous preferences, discussed in Bogomolnaia and Mouhn [3]: in 
this case, the flow between a supplier-demander pair can be thought of as the probability that this 
pair is matched. Some of the negative results related to link strategyproofness discussed later are 
true even in this restricted setting as has already been observed there; we mention these results 
in the appropriate sections for the sake of completeness. Finally, Megiddo [H [7] considered the 
problem of finding an "optimal" flow in a multiple-source, multiple-sink network, and proposed an 
algorithm to find a lexicographically optimal flow. The egalitarian algorithm described in Bochet 
et al. [21 |T] is essentially Megiddo's algorithm to compute a lexicographically optimal flow. An 
implication of our result is that Megiddo's algorithm is group strategyproof with respect to the 
source and sink capacities, that is, if the agents are located on the edges incident to sources and 
sinks, and all other edge-capacities are common knowledge, then no coalition of agents have an 
incentive to misreport their capacities. This observation is useful in settings in which equitably 
sharing resources is important, such as the sharing problem of Brown [Ij. 

2 Models and Notation 

A single commodity is transferred from a set S of suppliers (typically indexed by i) to a set D 
of demanders (typically indexed by j). The commodity can only be transferred between certain 
supplier-demander pairs, given by a bipartite graph G '^ S x D: {i,j) G G means that supplier i 
can send the commodity to demander j. A set of transfers from the suppliers to the demanders 
results in a vector {x,y) G M;^ x M;^ where Xi (resp. yj) is supplier i's (resp. demander j's) 
net transfer, with X^^Xj = "^dVj- Each supplier i has single-peaked preferences^ Ri (with 
corresponding indifference relation Ij) over her net transfer Xj, with peak Si, and each demander 
j has single-peaked preferences Rj (Ij ) over her net transfer yj , with peak dj . We write 7^ for the 
set of single peaked preferences over M_|_, and TZ for the set of preference profiles. 

We use the following notation. For any subset T Q S, the set of demanders compatible with 
the suppliers in T is f{T) = {j G D\G{T,{j}) / 0}. Similarly, the set of suppliers compatible 
with the demanders in C C D is g{G) = {i £ S\G{{i}, C) ^ 0}. We abuse notation and say f{i) 
and g{j) instead of /({«}) and g{{j}) respectively. For any subsets T C S, C '^ D, xt '■= Z^jgT ^* 
and yc '■= "^j^cyj- ^ transfer of the commodity from S" to Z? is realized by a flow ip, i.e., a 
vector if G M^. We write x{(p),y{(p) for the transfers implemented by ip, namely: 

for all i G 5 : Xi{(p) = 2_^ fij'i ^^i all j G D : yj{f) = 2_^ fij (1) 

i6/(j) ieg(i) 

We say that the net transfers {x, y) are feasible if they are implemented by some flow. Given the 
graph G and the preferences of the agents (both suppliers and demanders) , we would like to find 
feasible net transfers satisfying some desirable properties. An allocation rule (or a mechansim) 



^Writing Pi for agent z's strict preference, we have for every Xi,x[: xt < x'^ < Si ^ x'^PiXi, and Si < Xi < x'^ 

XiliX^, 



is a function that associates feasible net transfers to any given problem. We shall be concerned 
exclusively with the egalitarian mechanism (described later) proposed by Bochet et al. [21 1]- An 
important feature of the egalitarian mechanism is that it is peak-only: the egalitarian net transfers 
depend on the preferences of the agents only through the peaks. Thus it makes sense to talk of 
the problem (G, s,d): this emphasizes the fact that the peaks of the agents and the identity of 
their potential trading partners on the other side can both be modeled as private information. To 
summarize: (i) agents (suppliers and demanders) report their peaks as well as the set of agents on 
the other side they are compatible with; (ii) the graph G has a link from supplier i to demander j 
if and only if both i and j report each other as compatible; and (iii) the egaliatarian mechanism 
is applied to the problem (G, s, d) where s and d are the reported peaks of the suppliers and 
demanders respectively. 

A mechanism is link strategyproof if for any profile of peaks {s,d), it is a weakly dominant 
strategy for each agent to truthfully report their set of compatible partners. A mechansim is 
said to be peak strategyproof if for any graph G it is a weakly dominant strategy for an agent to 
truthfully report their peak. A mechanism is said to be strategyproof if it is a weakly dominant 
strategy for each agent to truthfully report their peak as well their set of compatible partners. It is 
not difficult to see that a mechanism is strategyproof if and only if it is both peak strategyproof and 
link strategyproof. These definitions admit a natural extension that models potential deviations 
by coalitions of agents: thus, a mechanism is link group strategyproof if for any profile of peaks 
(s, d) it is a weakly dominant strategy for any coalition of agents to truthfully report their set 
of compatible partners. Similarly, a mechanism is peak group strategyproof if for any graph G 
it is a weakly dominant strategy for any coalition of agents to truthfully report their peaks. 
Finally, a mechanism is group strategyproof if it is a weakly dominant strategy for any coalition 
of agents to truthfully report both their peaks and compatible partners. Again, it is not hard to 
see that a mechanism is group strategyproof if it is both peak group strategyproof and link group 
strategyproof. 

We shall focus on two related, but distinct, models. In the one-sided model, only the suppliers 
are modeled as strategic agents; the demanders are not strategic and their demands must be 
met exactly, so that some suppliers may be forced to send more than their peaks. In the two- 
sided model, both the suppliers and the demanders are modeled as strategic agents. Thus, in 
considering strategic issues in the one-sided model, we shall naturally only examine coalitions of 
suppliers. 

3 The One-sided Model 

3.1 Model 

Recall that in the one-sided model, we are given a bipartite graph G with suppliers S indexed 
by i and demanders D indexed by j. Demander j has a demand of dj that must be satisfied 



exactly, whereas supplier i has single-peaked preferences with peak sj; therefore, a supplier may 
be required to send more or less than his peak. In addition supplier i is required to send at least 
£i and at most Ui units of flow; we may assume without loss of generality that ii < Si < Ui. The 
peaks of the demanders, their preferences, and the ii and Ui are common knowledge; in contrast, 
for any supplier i, his peak Si and the set f{i) of demanders he is linked to may be private 
information held only by that supplier i and hence must be elicited by the mechanism. 

Let A := (Aj)jgs' be non-negative. Construct the following network G{X): introduce a source s 
and a sink t; arcs of the form (s, i) for each supplier i with capacity Aj, arcs of the form (j, t) for 
each demander j with capacity dj ; an infinite-capacity arc from supplier i to demander j if supplier 
i and demander j share a link. Let i = {li)i<^s-: u = (^ti)je5, and s = (spies'- It is straightforward 
to verify that the given problem admits a feasible solution if and only if the maximum s-t flow 
in G{£) and G{u) are, respectively, X^jg5^j and Ylj&o'^j- Consider now a maximum s-t flow in 
the network G{s). By the max- flow min-cut theorem, there is a cut G (a cut is a subset of nodes 
that contains the source s but not the sink t) whose capacity is equal to that of the max-flow. If 
the set of suppliers in C is X and the set of demanders in G is Y , it is clear that Y = f{X): if 
Y 2 fi^), then C has infinite capacity, and if y D fi^) then C"s capacity can be improved by 
deleting the demanders in y \ f{X). Bochet et al. [I] show that in any Pareto-optimal allocation 
X for the suppliers, Xi < Si for each i £ X and Xi > Sj for each i £ S \X. 

If the min-cut is not unique, it is again well-known (see [5]) that there is a min-cut with the 
largest X (largest in the sense of inclusion), and a min-cut with the smallest X (again in the sense 
of inclusion) . Call these sets X and X. It is easy to check that every supplier in X \ X will be at 
his peak value in all Pareto optimal solutions. In the notation of Bochet et al. [J], Mq := X \ X, 
M_ := X, and M+ := S \ X. To keep things simple, however, we shall dispense with Mq and 
use the partition M_ = X, M-|- = 5" \ X. In this case the partition of the demanders becomes 
Q+ = /(M_) and Q- = D\ f{M^). We note that our M_ is still uniquely determined for each 
problem. In what follows, often it will be important to talk about the set of suppliers involved in 
the cut, rather than the cut itself: we abuse notation and talk about the cut X when in fact the 
set of nodes in the cut is really s U AC U f{X). 

3.2 Egalitarian Mechanism 

Suppose (xj)jg5 is a Pareto optimal allocation. From the earlier discussion it is clear that Xi G 
[sj,'Uj] for every supplier i £ M+, and Xj G [ii,Si] for every supplier i £ M_. Bochet et al. [1] 
prove that the egalitarian allocation, which is defined independently for the suppliers in M_ and 
M-f., Lorenz dominates all other Pareto optimal allocations. 

For the suppliers in M_, the egalitarian allocation is found by the following algorithm. Let A 
be a parameter whose value is increased continuously from zero, and let mj(A) = median(^j. A, Sj). 
Consider the graph G{m(X)), where the capacity of the arc (s, i) is m,j(A). By the earlier discussion, 
we know that each supplier in M_ will send at least ii and at most Si units of flow in a Pareto 



optimal solution, and that every demander j in f{M-) will receive exactly dj units of flow. We now 

study the sequence of networks G{m{\)) — specifically the maximum s-t flow in such networks — 

as A is increased from zero. It is not hard to see that the maximum s-t flow in G{m{\)) is a 

weakly-increasing, piecewise linear function of A with at most 2n breakpoints. Moreover, each 

breakpoint is one of the li, or one of the Si (type 1), or is associated with a subset of suppliers X 

such that 

Y^m,{\) = Yl d, (2) 

iex je/(x) 

This we call a type-2 breakpoint. At a type-1 breakpoint, the associated supplier is at his peak 
and so will not send any more flow (recall that every supplier i G M_ will send flow at most his 
peak Si); at a type-2 breakpoint, however, the group of suppliers in X are sending enough flow to 
satisfy the collective demand of the demanders in f{X), so any further increase in flow from any 
supplier in X would cause some demander in f{X) to accept more than his peak demand. 

If the given problem does not have any type-2 breakpoint, then the egalitarian solution obtains 
by setting each supplier's allocation to his peak value. Otherwise, let A* be the first type-2 break- 
point of the max-flow function; by the max-flow min-cut theorem, for every subset X satisfying 
Q at A* the cut C^ = {s} U X U f{X) is a minimal cut in G{m{X*)) providing a certificate of 
optimality for the maximum-flow in G{m{X*)). If there are several such cuts, we pick the one 
with the largest X* (its existence is guaranteed by the usual supermodularity argument). The 
egalitarian solution obtains by setting 

Xi = median(£j. A*, Sj), for i G X* , i/j = dj, for j G f{X*), 

and assigning to other agents their egalitarian share in the reduced problem involving the suppliers 
in M_ \ X* and the demanders in Q_|_ \ f{X*). It is straightforward to verify that the first type-2 
breakpoint A** of this reduced problem will satisfy A** > A*. 

For the suppliers in M+, a similar algorithm is used to determine the egalitarian allocation: 
here, each demander j G Q- receives exactly di units of flow, whereas every supplier i G M_|_ = 
g{Q-) sends at least Si and at most Ui units of flow in a Pareto optimal solution. As before, we 
consider the graph G{m{X)), where the capacity of the arc (s, i) is mi{X) := median(sj. A, u-i). We 
increase A gradually and observe that the maximum s-t flow in G{m{\)) is a weakly-increasing, 
piecewise linear function of A with at most 2n breakpoints. Moreover, each breakpoint is one of 
the Sj, or one of the ui (type 1), or is associated with a subset of suppliers X such that 

^mi(A) = ^ dj 
i&x jafix) 

This we call a type-2 breakpoint. At a type-1 breakpoint, the associated supplier is at his upper- 
bound and so cannot send any more flow; at a type-2 breakpoint, however, the group of suppliers 
in X are sending enough just enough flow to satisfy the collective demand of the demanders in 
f{X), so any decrease in flow from any supplier in X would cause some demander in f{X) to 
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receive an amount strictly below his peak demand. As before, if the given problem does not have 
any type-2 breakpoint, then the egalitarian solution obtains by setting each supplier's allocation 
to his upper bound. Otherwise, let A* be the first type-2 breakpoint of the max-flow function, and 
let X* be the (largest) associated bottleneck set of suppliers (as before). The egalitarian solution 
obtains by setting 



Xi 



median(si, A*, Uj), for i £ X* , yj = dj, for j £ f{X*) 



and assigning to other agents their egalitarian share in the reduced problem involving the suppliers 
in M_|_ \ X* and the demanders in Q- \ f{X*). This completely defines the egalitarian solution. 

3.3 Group Strategyproofness 

We turn now to strategic aspects of the rationing problem with constraints. In the one-sided 
model, only the suppliers are modeled as "agents," who possess potentially two pieces of informa- 
tion that could be modeled as private: the set of demanders they are compatible with, and their 
own preference over allocations R As the egalitarian mechanism is "peak-only" [Ij, it is sufficient 
for the suppliers to report only their peaks, rather than their entire preference ordering. 

It is a simple matter to verify that the egalitarian mechanism is not link strategyproof. Con- 
sider a supplier with a peak of 1, connected to two demanders, each with a demand of 1, see 
Figure [l} If the supplier reveals both links, his egalitarian allocation is 2, whereas by suppressing 
one of the links, his egalitarian allocation improves to 1. Therefore in the rest of this section we 
focus only on peak strategyproofness. 




Figure 1: Counterexample for Link SP 

Bochet et al. [T] show that the egalitarian mechanism, which finds the egalitarian allocation 
for any given problem, is peak strategyproof. Our main result in this section is that, in fact, the 



^The set of demanders, their individual demands, as well as the the lower and upper bounds on arc-flows are 
assumed to be common knowledge. 



egalitarian mechanism is peak groupstrategyproof. To set the stage for this, we start with a lemma, 
which we first use to give an alternative proof that the egalitarian mechanism is strategyproof. 

Lemma 1 For a problem {G,s,d), suppose the decomposition is M+ and M_ (with Q^, Q- 
defined as before), and the egalitarian allocation is x. Consider the problem (G, s' , d) with s'- = Sj 
for all j 7^ i, with the decomposition being M'_^ and M'_. 

(a) IfieM- and s[ > Si, M+ = M+ and M'_ = M_ . 

(b) If i G M+ and s'^ < Si, M^ = M+ and M'_ = M_ . 

Proof. By definition, M_ is the smallest (both in terms of cardinality and inclusion) min-cut in 



the graph G{s) (see ^3.1 for the definition). For i € Af_, the arc {s,i) does not contribute to the 
cut-capacity. If s'^ > Sj, the capacity of any cut is weakly greater in {G,s',d) than in {G,s,d), 
whereas the capacity of the cut M_ stays the same, so part (a) follows by the minimality of M^ . 
Similarly, for i G Af+, the arc {s,i) contributes to cut-capacity, the capacity of the cut M_ is 
smaller in (G, s' , d) than in (G, s, d) by exactly Si — s[, whereas the capacity of any cut is weakly 
smaller in (G, s' , d) than in {G, s, d) by at most Si — s[. Again, part (b) follows by the minimality 
ofM_. ■ 

Theorem 1 The egalitarian mechanism is peak strategyproof. 

Proof. For the problem (G, s, d) let x be the egalitarian allocation, and let M+ and M- be 
defined as before. Consider the problem {G,s',d) with Sk = s'j^ for all k ^ i. Suppose i G M_. 
If s\ > Si, Lemma Q^ proves that the decomposition does not change; it is easy to see that the 
egalitarian allocation is unaffected as well, because the algorithm to compute operates identically 
in the problems {G,s,d) and {G,s',d). Similarly, if i G M+ and s'^ < Si, the decomposition does 
not change (by Lemma [l]), and the egalitarian allocation is unaffected as well. Suppose agent i 
reports s',- as his peak and the allocation changes to x'-. To prove strategyproofness, it suffices to 
show that any i S M_ (weakly) prefers Xi to x[ for all s'- < Sj, and that any i £ M+ (weakly) 
prefers Xi to x[ for all s'^ > Si. 

Fix an i G M_ , and suppose that i reports a peak of sJ < Sj . In this case the decomposition 
may change; let M'_ and M^ be the new decomposition. If i G M'_, an application of LemmaIl|to 
the problem (G, s',d) shows that the decomposition does not change, and that x[ = Xi. Suppose 
i G M|. Let D' := Q+nQ'_, and X' := M_nM^, and note that by our supposition X' 3 i. Note 
also that g{D') n M_ C X' , as no agent in M'_ has a link to any demander in Q'_. Furthermore, if 
i g{D'), x'- = 0, and again the result follows: recall that f{i) C Q_^.- and if i di^'), f{i) ^ Q+, 
and the links from M^ to (5+ do not carry any flow. So we may assume that i G g{D'). We now 
make two simple observations about the agents in X' n g{D') in the problem (G, s' , d): first every 
such agent sends flow only to the demanders in D' , and therefore ^^keX'nqiD') ^'k — YIj^d' ^j- 



Also, as every agent in X' n g{D') is (weakly) above his reported peak, x'^^ > Sk l:or every k G 
X' n g{D'), k j^ i, and x[ > s[. This implies 



E 



Sk + x'i < '^ dj. (3) 



We next claim that in the problem {G,s,d), '^keX'nq(D')^k = 'l2jeD''^J- '^° ^^^ why, observe 
that the demands of D' are covered in the problem (G, s, d) by the suppliers in M_ n g{D'); but 
every demander in D' moves from Q^^- to Q'_, so every supplier in M_ n g{D') must move to M^ 
(as there cannot be an edge between a supplier in M'_ and a demander in Q'_)- This implies that 
any supplier supplying a positive amount to a demander in D' in the problem (G, s, d) must be in 
X'f\g{D'). Note also that for each k £ X'ng{D'), x^ < Sk- These, along with X'ng{D') C M_, 
imply 

X] Sk + x^>^dj. (4) 

k&X'r\g{D'),kjti jeD' 

Inequalities Q and Q imply x^ < Xj, as required. 

Now fix an i € M+, and suppose that i reports a peak of s^ < Sj. In this case the decomposition 
may change; let M'_ and M'_^ be the new decomposition. If i E M^, as before, an application 
of Lemma [T] to the problem {G,s',d) shows that the decomposition does not change, and that 
x[ = Xi. Suppose i G M'_. Let D' := Q_ n Q'^, and X' := M+ n M'_, and note that by our 
supposition X' B i. Note also that f{X') D Q- C D', as no agent in M'_ can have a link to any 
demander in Q'_^. We now make two simple observations about the demanders in f{X') n D' in 
the problem (G, s' , d): first every such demander can receive fiow only from the agents in X' , and 
therefore YlkeX' ^'k — ^jef(X')nD' ^j- Also, as every agent in X' is (weakly) below his reported 
peak (in the new problem), x'^ < Sk for every k G X' , k ^ i, and x^ < s^. This implies 

Y^ Sk + x'i > Yl ^i- (5) 

k(^x',kj^i jef{X')nD' 

We next claim that in the problem (G, s, d), J2keX' ^k = S)Gf(X')nD' ^i- ™ (^' ^' '^) ^^^ suppliers 
in X' send flow only to the demanders in f{X') D D' , who receive flow only from these suppliers. 
Furthermore, x^ > Sk for each k £ X' . In particular, 

kex',k=/=i jg/(x')nD' 

Inequalities (p| and mj imply x^ > Xj, as required. ■ 

In fact, the ideas in the proof of Theorem [T] can be used to prove the following result, which 
weakens the conditions under which the decomposition is guaranteed not to change. 

Lemma 2 For a problem {G,s,d), suppose the decomposition is M+ and M_ (with Qj^, Q- 
defined as before), and the egalitarian allocation is x. Consider the problem (G, s' , d) with s'- = Sj 
for all j 7^ i, with the decomposition being M'_^ and M'_. 

9 



(a) IfiGM^ and s- > Xi, M+ = M+ and ML = M_. 

(b) If i G Af+ and s[ < Xi, M'^ = M+ and M'_ = M_. 

Proof. By definition, M_ is the smallest (both in terms of cardinality and inclusion) min-cut in 



the graph G{s) (see ^3.1 for the definition). For i £ M_, the arc (s, i) does not contribute to the 
cut-capacity. If s'^ > Sj, the capacity of any cut is weakly greater in {G,s',d) than in {G,s,d), 
whereas the capacity of the cut M_ stays the same, so the result follows. Suppose now that 
Xi < s'j^ < Si, the max s-t flow in G{s') is weakly below that of G{s), but the egalitarian allocation 
X is still feasible, so x continues to be a max- flow, so Af_ continues to be a min-cut in G{s'). 
We need to show that it remains the minimal min-cut. First observe that M'_ C M_, as M'_ is 
the minimal min-cut in G{s') whereas M_ is a min-cut for G{s'). If i G M'_, then the capacity 
of the cut M'_ is the same in G{s) and G{s'), so the minimality of M_ in the problem (G,s,d) 
implies Mi = Af_. Suppose i ^ M'_. Let X = M_\M'_, and note that i G X. Note also that 
Q^ = f{M-) and QV = fiM'_), so that the net change in the cut capacity when the suppliers in 
X move from M_ to M^ is precisely X^^gx ^'k ~ ^j<^Q \Q' ^i- ^^ ^^^ problem (G, s, d), however, 
the demanders in Q-^ \ Q'_^_ receive flow only from the suppliers in X, each of whom sends no more 
than his peak: thus, J2kex ^k ^ Yljeo \q' ^i' ^^'^ ^k ^ Xk for each k. An easy implication is 
that s'l^ > Xk for each k £ X, k ^ i, and s[ > Xi. Thus the net change in cut capacity in moving 
from M_ to M'_ is strictly positive, which implies M'_ cannot be a min-cut. A similar argument 
establishes part (b). ■ 

We conclude this section with a proof that the egalitarian mechanism is, in fact, group strat- 
egyproof. 

Theorem 2 The egalitarian mechanism is peak group strategy proof. 

Proof. Suppose not. Focus on a counterexample G with the smallest number of nodes. Suppose 
the true peaks of the suppliers are s and suppose they misreport their peaks to be s' . Fix a 
coalition A of agents: note that this coalition includes all the agents k with s^ 7^ s^. Let x and 
x' be the respective allocations to the agents when they report s and s' respectively. As with the 
earlier proof, let M_|_, M_ be the decompsition when the agents report s, and let M'_^, M'_ be the 
decomposition when the agents report s' . We shall show that when the agents report s' rather 
than s the only allocation in which each agent in A is (weakly) better off is one in which x'^ = Xk 
for all k £ A, establishing the required contradiction. 

Let D' := Q^ n Q'_. Note that g{D') C M"^, for otherwise there will be a supplier in M'_ 
with a link to a demander in Q'_. We now make two simple observations about the agents in 
M^ng{D'): 

• When the report is s', every such agent can send flow only to the demanders in D': this 
is because f{M^) C Q^, and each agent in g{D') can send flow only to the agents in Q'_. 

Th.GXGiomY.k(iM.ng(D')^'k < EjeD'^^i- 
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• When the report is s, the demanders in D' can receive flow only from such agents: the 
demanders in D' can receive flow only from the suppliers in M„ and they are connected 
only to the suppliers in g{D'). Therefore Ylk&M-ng{D') ^k > J2jeD' ^i- 

Note also that s^ < x^, and x^ < s^ for any k G M_ n g{D'), and that s^ = s^ for all k ^ A. 
These observations lead to 

Y^ sk+ Y x'k = Yl 4+ Y ^'k - Yl ^'k ^ Yl '^j' c^) 

k&M-r\g{D') k&M-r\g{D') A:eM_ng(D') fceM_ng(D') fceAf_ng(Z)') jeD' 

k^A keA k^A keA 

and 

jGD' fceM_ng{Z)') fceA/_n3(D') fceAf_n9(Z)') 

fc^A fceA 

For every agent in A to be (weakly) better off when reporting s' , we must have x^ > Xk 
for each k £ A. Combining this with inequalities ((tI) and (fsl), we conclude that x'^ = x^ for 
each fc G M_ n g{D') n ^. Moreover, these inequalities also imply that x'^ = x^ = Sk for each 
fe G M_ r\g{D'), k ^ A. Thus, x'^ = Xfc for all k G M_ r\g{D'). Also, whether the report is s or is 
s', the suppliers in M_ n g{D') send all of their flow only to the demanders in D'] and that these 
demanders receive all of their flow only from the suppliers in M_ n g{D'). Therefore, removing 
the suppliers in Af_ n g{D') and the demanders in D' does not affect the egalitarian solution for 
either problem. As we picked a smallest counterexample, D' = 0. 

We now turn to the other case. Let X := M+nMi. Note that f{X)r\Q- C Q'^, for otherwise 
there will be a supplier in M'_ linked to a demander in Q'_. Consider the demanders in f{X)f^Q^■. 

• When the report is s', every such demander can receive flow only from the suppliers in X: 
such demanders are linked only to the suppliers in M+ and can receive flow only from the 
suppliers in M'_. Therefore Efcex 4 > Eje/(x)nQ_ ^i- 

• When the report is s, the suppliers in X send flow only to the demanders in Q_, and they 
can send flow only to the demanders they are connected to, so the suppliers in X can send 
flow only to the demanders in f{X) n Q-. Therefore X^fcex ^k < Yljef(x)r\Q ^i- 

Note also that s^ > x^ and x^ > Sk for any A; G X, and that s'^ = s^ for all k ^ A. Putting all 
this together we have: 

^ Sfc+ J]] X';, = Y ^'k+ Y ^'k ^ JZ^fc - Y ^J' (^) 

fcex\A fcexnA k&x\A k&xnA kex je/(X)nQ_ 



and 



y^ dj > Y^k > X^ ■Sfc + X^ Xi. (10) 

jef{x)nQ- kex kex\A iexnA 
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For every agent in A to be (weakly) better off when reporting s' , we must have x^ < x^, for 
each k ^ A. Combining this with inequahties (|9J) and (10), we conclude that x^ = Xk for each 



k £ X n A. Moreover, these inequalities also imply that x'^ = x^ = s^ for each k £ X \ A. Thus, 
x'f. = Xk for all k G X . Note that the suppliers in X send all of their flow flow to the demanders 
in f{X) n Q-, whether the report is s or s'; also the demanders in f{X) n Q- receive all of their 
flow from the suppliers in X, whether the report is s or s' . Therefore, removing the suppliers in 
X and the demanders in f{X) n Q^ does not affect the egalitarian solution for either problem. 
As we picked a smallest counterexample, X = 0. 

We now establish that the decomposition does not change in a smallest counterexample. We 
already know that D' = 0, which implies Q'_ Q Q_. Suppose this containment is strict so that 
there is a demander j £ Q^ \ Q'_. Then, g{j) C M+. As X = 0, g{j) C M'^, which implies 
demander j cannot receive any flow when the report is s' . Therefore Q'_ = Q-, which implies 
Q'+ = Q+, M| = M+, and M'_=M_. 

To complete the argument, let A be as defined earlier. Let ^4+ = Ar\ Mj^ and A_ = Ar\ Af_. 
For any i € j4_, s\ < Xj implies x'^ < s'^ < Xi, causing i to do worse by reporting s'^. Likewise, any 
i G A^, s[ > Xi implies x'- > s'^ > Xi, causing i to do worse by reporting s'^. So any improving 
coalition A must be such that s[ > Xj for all i G yl_ and s[ < xt for all i G A^. But in this case 
the egalitarian solution does not change for either problem. ■ 

4 The Two-sided Model 

4.1 Model 

We now turn to the two-sided model, introduced by Bochet et al. [2]. This is closely related 
to the one-sided model, and yet there are some important differences, so our treatment will be 
concise, and will focus mostly on the aspects that make this model different. As in the one-sided 
model, we are given a bipartite graph G with suppliers (M) indexed by i and demanders by j. In 
the two-sided model, however, both the suppliers and demanders have single-peaked preferences: 
supplier i has a peak of Sj, and demander j has a peak of dj. Define the graph r(G, s, d) by adding 
a source a connected to all suppliers, and a sink r connected to all demanders; by orienting the 
edges from source to sink; by setting the capacity of an edge in G to infinity, that of an edge 
ai, i G S", to Sj, and that of j'r, r G D, to dj. A a-r cut (or simply a cut) in this graph is a subset 
C of nodes that contains a but not r. The capacity of a cut G is the total capacity of the edges 
that are oriented from a node in C to a node outside of G (such edges are said to be "in the cut"). 
It is well-known that the max-flow from o" to r in this network is the same as the capacity of a min 
a-T cut. Fix an arbitrary min ct-t cut C, and let X be the set of suppliers in G and Y be the set of 
demanders in G. It is not hard to see that Y = f{X) in a min-cut. Bochet et al. [2] characterize 
the Pareto optimal solutions to this model using a network construction very similar to that used 
for the one-sided model. In particular they show that in any Pareto optimal allocation (x,y). 
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Xi < Si for i £ X and Xi > Si for each supplier i ^ X; similarly, yj < dj for all j gY, and yj > dj 
for all j Y. In addition they show that in a Pareto-optimal allocation, there is no flow from a 
supplier not in X to a demander in Y (even though links may exist between such suppliers and 
demanders). In effect, the problem decomposes into two subproblems, one involving the suppliers 
in X and the demanders in y;the other involving the suppliers not in X and the demanders not 
in Y. The egalitarian allocation is found independently for each subproblem, using exactly the 



same algorithm described earlier in ^3.2, They also show that the egalitarian allocation can be 



found by an alternative algorithm as follows: first, set all the demands to be dj and apply the 



one-sided egalitarian algorithm described earlier in ^3.2 with the additional restriction that no 
supplier sends more than his peak, and that no demander receives more than hers; this gives the 
egalitarian allocation for the suppliers. The egalitarian allocation for the demanders is obtained 
by applying the same algorithm under the same additional restriction, but interchanging the roles 
of the suppliers and demanders (thus, we fix the supplies to be the Sj etc.) It is this equivalent 
definition that we will use in the proofs. A key result is that the egalitarian allocation is the 
Lorenz dominant element of the subset of the Pareto optimal allocations in which no agent sends 
or receives more than their peak (this set is called Pareto* by Bochet et al.). By picking a cut C 
with the largest X, we find a canonical decomposition for each problem, as such a cut is unique: 
to relate this with the notation of Bochet et al., the X corresponding to the largest C is S*-, and 
the demanders y in C is the set -D+ ; the suppliers outside of X belong to S-^ , and the demanders 
outside of Y are in Z)_ . 

We turn now to strategic issues. Bochet et al. [2] show that the egalitarian mechanism is both 
link strategyproof and peak strategyproof. Here we show that the egalitarian mechanism is in 
fact peak groupstrategyproof. 

Theorem 3 In the two-sided model, the egalitarian mechanism is peak group strategyproof. 

Proof. Suppose not. Focus on a counterexample G with the smallest number of nodes. Suppose 
the true peaks of the suppliers and demanders are s and d respectively, and suppose their respective 
misreports are s' and d' . We can assume that dj > for every demander j, as otherwise deleting 
j would result in a smaller counterexample. Fix a coalition A of suppliers and a coalition B of 
demanders : note that A contains all the suppliers k with s'^ / s^, and B includes all demanders 
i with d'^ ^ di. 

Let {x,y) and (x',y') be the respective allocations to the suppliers and demanders when they 
report {s,d) and {s',d') respectively. Let 5+,S'_,D+,D_ be the decompsition when the agents 
report {s,d), and let S'_^_, S'_, D'_^, D'_ be the decomposition when the agents report {s',d'). We 
shall show that when the agents report {s' , d') rather than (s, d), the only allocation in which each 
agent in A U S is (weakly) better off, then x'^ = Xk for all A; G ^4 and y'^ = y£ for all ^ € -B. This 
establishes the required contradiction. 
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Let Y' := D^ f] D'_. Note that g{Y') C S'^, for, otherwise, there will be a supplier in S'_ 
with a link to a deniander in D'_. We now make two simple observations about the suppliers in 

s-ngivy. 

• For any such supplier k, s'^ = x'^ and Xk < s^. Also, di = y£ and y'^ < d'^ for any i S y'. 

• When the report is s', every such supplier can send flow only to the demanders in Y': this 
is because /(£*_) C L)_|_, and each supplier in g{Y') can send flow only to the agents in D'_. 
Therefore T,k&s.ng{Y') 4 < EeeY' v't 

• When the report is s, the demanders in Y' can receive flow only from such suppliers: the 
demanders in Y' can receive flow only from the suppliers in S- and they are connected only 
to the suppliers in gij'). Therefore Yjk^S-r,g{Y') ^k > Yji^^y Vi- 

Finally, note that s^ = Sk for all k ^ A, and d^ = di for all £ ^ B. These observations first lead to 

Yl *^+ Yl ^'k = Y ^'k+ Y ^'k = Y ^'k - Yy'i- (^^) 

A;es_n<?(y') fce5_n(?(y') k<^S-r\g(Y') k<^S-r\g(Y') keS-ng{Y') iaY' 

k^A feeA ki^A keA 

Note that every demander I mY' r\B receives exactly his peak allocation d^ for a truthful report, 
so for the coalition B of demanders to do weakly better in the (G, s', d') problem, y^ = di for each 
such L Therefore, 

E^^ = E y^+ E y^ ^ E ^'^+ E ^^ = E^^ (12) 

tey i.&'\B eeY'nB e.i^Y'\B eeY'nB eeY' 



Finally, 



E '^^ = E ^^ - E ^'^^ - E '^'^ + E ^'^^ (■^^) 

£eF' i&Y' keS-ng{Y') fce5_ng(y') fces'_ng(y') 

fc^A keA 



For every supplier in A to be (weakly) better off when reporting s' , we must have x^ > x^ 



for each k £ S^ g{Y'). Combining this with inequalities (11) and (13), we conclude that all 



the inequalities in (11)-(13) hold as equations. In particular, x^ = Xk for all k G S- Ci g{D'), 
and y'^ = yi for i £ Y' . Therefore, whether the report is s or is s' , the suppliers in 5_ n g{Y') 
send all of their flow only to the demanders in Y'; and that these demanders receive all of their 
flow only from the suppliers in S- D g(Y'). Therefore, removing the suppliers in S- D g{Y') and 
the demanders in Y' does not affect the egalitarian solution for either problem. As we picked a 
smallest counterexample, Y' must be empty. 

We now turn to the other case. Let X := S-^- n S'_. Note that f{X) D D^ C D'_^, for otherwise 
there will be a supplier in S'_ linked to a demander in D'_. Consider the demanders in f[X)r\D^: 

• For any such demander I, d'^ = y\ and yi < di. Also, Sk = Xk and x'^ < s'^ for any k £ X. 
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• When the report is s', every such demander can receive flow only from the supphers in X: 
such demanders are hnked only to the suppliers in 5+ and can receive flow only from the 
suppliers in S'_. Therefore Efcex4 ^ E£e/(x)nD_ v't 

• When the report is s, the suppliers in X send flow only to the demanders in D_, and they 
can send flow only to the demanders they are connected to, so the suppliers in X can send 
flow only to the demanders in f{X) Pi D-. Therefore X^fcex ^^ < 'Yl,tef{x)r^D- H^- 

Finally, note that s^ = s^ for all k ^ A, and d'^ = d^ for all i ^ B. Putting all this together, we 
have: 

J2 de+ J2 d'^= E < = J2 y'i^ (14) 



eefix)nD-) te/(x)nD_) ief{x)nD- te/{X)nD- 



and 



E y'^^ E^ ^ E 4+ E ^'^ = E ^^•+ E 4- (i^) 

e&f{X)r\D- fceX k&X\A k&XnA k&X\A k&XnA 

Note that every supplier k in X D A receives exactly his peak allocation Sk for a truthful report, 
so for the coalition A of suppliers to do weakly better in the {G, s' , d') problem, x';. = Sk for each 
such k. Thus, 

^ Sfc+ ^ Xfc = ^Sfc = ^Xfc < Y^ ye < ^ di+ ^ yi (16) 

k&x\A k&xnA k&x k&x ^e/(x)nD_ £e/(x)nD_ te/(X)nD_ 

For every demander in B to be (weakly) better off, we must have y^ > yi for each i G 



/(X) n -D_. Combining this with inequalities (14)-(16), we conclude that all the inequalities in 



(14)-(16) hold as equations. In particular, x'^. = Xk for all k & X, and y'^ = yg for i £ f{X) D D^. 
Therefore, whether the report is s or is s' , the suppliers in X send all of their flow only to the 
demanders in f{X)r]D-; and that these demanders receive all of their flow only from the suppliers 
in X. Therefore, removing the suppliers in X and the demanders in f{X) n Z?_ does not affect 
the egalitarian solution for either problem. As we picked a smallest counterexample, X must be 
empty. 

We now establish that the decomposition does not change in a smallest counterexample. We 
already know that Y' = 0, which implies D'_ C D_. Suppose this containment is strict so that 
there is a demander j £ D^ \ D'_. Then, g(j) C S+. As X = 0, g{j) C S'_^, which implies 
demander j cannot receive any flow when the report is s' (i.e. x'- = 0). This is a contradiction 
since, d'{j) > 0, then the egalitarian solution allocates the pareto value x', = d'j for all j G D'j^. 
(w.l.o.g we can skip the case d'- = as we can delete such a j to obtain the new decomposition 
or just place it in L)_). Therefore D'_ = D^, which implies D'_^_ = D_|_, S'_^ = S+, and S'_ = 5_. 

To complete the argument, let A be as deflned earlier. Let A^ = AD S^ and A^ = ACi S^, 
i3+ = ^ n D+ and i?_ = ACi Z)_ . Now, for any j G i?_|_, d'- ^ dj implies y'- = d', 7^ dj causing j to 
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do worse by reporting d'^. Hence, it follows, Vj G Bj, 
establish s'- 



d', = dj. By a similar argument, we could 



For any i £ A^, s[ < Xi implies x[ < s'^ < Xj, causing i to do worse by reporting s[. Likewise, 
any i £ i?_ , d'^ < yi implies y'^ < d'^ < yi , causing i to do worse by reporting d'^ . So any improving 
coalition A must be such that s'^ > Xi for all i G A^ and d'^ > yi for all i G -B_. But in this case 
the egalitarian solution does not change for either problem. ■ 




2 1 



2 1 




Figure 2: A counterexample for link GSP 

We turn now to link group strategyproofness. That the egalitarian mechanism is not link 
group strategyproof in the two-sided model is not difficult to see. Consider the network shown in 
Figure 2. The network (a) represents the true network, with the peaks shown next to the agent 
labels. The egalitarian allocation gives 1 unit to each supplier and to each demander on this 
example. Suppose however supplier 1 and demander 2 collude, and supplier 1 does not report his 
link to demander 1. In the resulting network, shown in (b), each supplier still receives his peak 
allocation; demander 2 now receives her peak, and demander 1 receives nothing. Note that both 
members of the coalition weakly improve, and demander 2 strictly improves, proving that the 
egalitarian mechanism is in general not link group strategyproof Q The following result, however, 
shows that the egalitarian mechanism satisfies a limited form of link group strategyproofness. 

Theorem 4 In the two sided model, the egalitarian mechanism is link group strategy proof when 
the coalition is restricted to the set of suppliers only (demanders only). 

Proof. We prove the result for an arbitrary coalition of suppliers; the result for the demanders 
follow by a similar argument. Let Ai be the set of demanders that supplier i is linked to, and let 
A'- be supplier i's report. We may assume without loss of generality that any given demander finds 



^This example may suggest that if we require each member of the deviating coalition to strictly improve their 
allocation, then the egalitarian mechanism may be link group strategyproof. However, this is also false, as shown by 
Bogomolnaia and Moulin [Bj. They construct an example involving 4 agents on each side with all peaks identically 
1 in which a coalition of agents from both sides deviate and all strictly improve. 
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all the suppliers acceptable: if demander j finds supplier i unacceptable, then supplier i cannot 
have a link to demander j regardless of his report, so clearly i's manipulation opportunities are 
more restricted. Let (p and (j) be (any) egalitarian flows when the suppliers report A and A' 
respectively, and let x and x' be the corresponding allocation to the suppliers. We show that no 
coalition of suppliers can weakly benefit by misreporting their links unless each supplier in the 
coalition gets exactly their egalitarian allocation. 

The proof is by induction on the number of type 2 breakpoints in the algorithm to compute 
the egalitarian allocation. Suppose the given instance has n type 2 breakpoints, and suppose 
Xi,X2, ■ ■ ■ ,Xn are the corresponding bottleneck sets of suppliers. If n = 0, every supplier is 
at his peak value in the egalitarian allocation, and clearly this allocation cannot be improved. 
Suppose n > 1. Define 



and 



jeAi jeAi 



Xe = {ieXe\Y^ 4^ < E -^^^'i- 
jeAi jdAi 



We shall show, by induction on £, that for each 11= 1, 2, . . . , n: 

(a) (p- = for any i G X^i, j G Ui'^XiAi', i' > £; and 

(b) X^ C X^. 

The theorem follows from part (b) above. 

Any supplier k £ X£\Xi must have A^ = A'^, as otherwise supplier k is part of the deviating 
coalition and does worse. Consider now a supplier i £ X^ with x-i < s-i and a supplier k £ Xi\ Xi. 
We have the following chain of inequalities: 

Yl ^kj = X] ^kj < Yl ^kj =Xk < Xi = Y^ (pij < Y ^'ij ^ Yl ^iy 
j(^A'^ jdAk j&Ak jGA, jdA, j(^A'. 

To see why, note that as k £ Xi\Xi, the second inequality is true by definition, and also A^ = A'^ 
(justifying the first equality). Also k,i G X^ and Xj < Sj, implies x^ < Sj, as suppliers k and i 
both belong to the same bottleneck set and supplier i is below his peak; this justifies the third 
inequality. The fourth and fifth inequalities follow from the fact that i £ Xi and the fact that (p^, 
must be zero for all j £ Ai\A'^. This chain of inequalities implies that x'f. < Xk < Sk and x'f^ < x[. 
Therefore, when the suppliers report A' , supplier k must be a member of an "earlier" bottleneck 
set than supplier i. An immediate consequence is that demanders in A^ = A^. do not receive any 
flow from supplier i when the report is A' . 

By the induction hypothesis, supplier i £ Xg does not send any flow to the demanders in 
Ui<j'<£-i Ufcex, Ak'. Therefore 

i 

{j I (l>'ij > 0,i G Ai} C {j I (Pij >0,j £ Ai}. 
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This observation, along with the fact that every i ^ X(^ weakly improves, and the fact that X(^ 
is a type 2 breakpoint implies that Yliji^A^ij ~ Z^ieA '!^U' establishing (b). Furthermore, in 
such a solution, every demander j £ Ai for i G Xi must receive all his flow from the suppliers in 
Xi.ln particular, the demanders in Xi cannot receive any flow from suppliers in Xi' for i' > i, 
establishing (a). To complete the proof we need to establish the basis for the induction proof, i.e., 
the case of ^ = 1. This, however, follows easily: it is easy to verify that the set Xi \ Xi must be 
empty, so Xi = Xi. As Xi is a type 2 bottleneck set, it is not possible for every member of Xi 
to do weakly better unless the allocation remains unchanged. Thus, both (a) and (b) follow. ■ 
An easy implication is the following result, whose proof is an immediate consequence of the 
results we have already established. 

Theorem 5 In the two sided model, the egalitarian mechanism is group strategyproof w.r.t. to 
both links and peaks when the coalition is restricted to the set of suppliers only (demanders only). 

5 Conclusions 
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Figure 3: Bossiness of the egalitarian mechanism 

Our main contribution is a proof of peak group strategyproofness of the egalitarian mechanism 
in the two settings considered by Bochet et al. A number of interesting open problems remain, 
and we mention a few. First, Bochet et al. characterize the egalitarian mechanism using Pareto 
efficiency, strategyproofness, and an equity property that can be thought of as the equal treat- 
ment of equals adapted to this constrained setting. A natural question is if there is an alternative 
characterization that uses group strategyproofness, but weakens the efficiency or the equity re- 
quirement. Second, it will be interesting to characterize all (both link and peak) strategyproof 
mechanisms for this problem. In particular, it will be of interest to find natural link-monotonic 
mechanisms for the one-sided model (the egalitarian mechanism fails this test). Finally, note that 
the egalitarian mechanism has the somewhat undesirable property that an agent can change the 
allocation of other agents without altering his own, see the example of Figure pj (Such mecha- 
nisms are said to be "bossy." ) Are there natural non-bossy mechanisms for this problem that are 
compelling from a normative point of view? 

18 



References 

[1] O. Bochet, H.Moulin, and R. Ilkilig. Egalitarianism under earmark constraints,. Technical 
report, mimeo, 2010. 

[2] O. Bochet, H. Moulin, R. Ilkilic, and J. Sethuraman. Clearing supply and demand under 
bilateral constraints. Technical report, 2010. 

[3] A. Bogomolnaia and H. Moulin. Random matching under dichotomous preferences. Econo- 
metrica, 72(l):257-279, 2004. 

[4] J. RandaU Brown. The sharing problem. Oper. Res., 27(2):324-340, 1979. 

[5] Laszlo Lovasz and Michael D. Plummer. Matching theory. AMS Chelsea Publishing, Provi- 
dence, RI, 2009. Corrected reprint of the 1986 original [MR0859549]. 

[6] N. Megiddo. Optimal flows in networks with multiple sources and sinks. Mathematical Pro- 
gramming, 7(1):97-107, 1974. 

[7] N. Megiddo. A good algorithm for lexicographically optimal flows in multi-terminal networks. 
American Mathematical Society, 83(3), 1977. 

[8] Y. Sprumont. The division problem with single-peaked preferences: a characterization of the 
uniform allocation rule. Econometrica, 59(2):509-519, 1991. 



19 



